bugtraq - Re: [Full-disclosure] Solaris telnet vulnberability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <ffa9ac690702120542p1714bdedn449a2a36ddfebbf4@mail.gmail.com>
Date: Mon, 12 Feb 2007 15:42:22 +0200
From: "Huzeyfe Onal" <huzeyfe.onal@...il.com>
To: "Vincent Archer" <varcher@...yall.com>
Cc: "Gadi Evron" <ge@...uxbox.org>,
	full-disclosure@...ts.grok.org.uk, bugtraq@...urityfocus.com
Subject: Re: [Full-disclosure] Solaris telnet vulnberability - how many on your network?

hi,
I tested with SunOS 5.7, 5.8,5.9 and 5.10 . Only SunOS 5.19 and
Solaris 10(Sparc) seems to be vulnerable with my systems.


On 2/12/07, Vincent Archer < varcher@...yall.com> wrote:
> On Mon, Feb 12, 2007 at 12:00:30AM -0600, Gadi Evron wrote:
> > Johannes Ullrich from the SANS ISC sent this to me and then I saw it on
> > the DSHIELD list:
>
> Tested around, and it does indeed work, on all solaris 10 (sparc & x86).
>
> > Update from HD Moore:
> > "but this bug isnt -froot, its -fanythingbutroot =P"
>
> OS packaging person here (the guy who defines the exact stripped version
> we install on customer appliance) did test with root, and it worked. I
> suspect it is dependent on whether root is enabled as allowed as a remote
> login or not (a setting I dimly remember being available on solaris 10
> years ago, I think).
>
> > Anyone else running Solaris?
>
>  We do, and we confirm. The info is spreading like wildfire, and justifiably
> so - I thought this bug category (-fuser) was squashed last with AIX over
> 10 years ago.
>
> --
> Vincent ARCHER
>  varcher@...yall.com
>
> Tel : +33 (0)1 40 07 47 14
> Fax : +33 (0)1 40 07 47 27
> Deny All - 23, rue Notre Dame des Victoires - 75002 Paris - France
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>



-- 
Huzeyfe ONAL
huzeyfe@...erunix.org
http://www.enderunix.org/huzeyfe
+90 555 255 4593

Ag guvenligi listesine uye oldunuz mu?
http://www.huzeyfe.net/netsec.html
---